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DETAILED ACTION 
Claim Objections 

Claims 1 , 3-9 are objected to because of the following informalities: misspelling. 
Regarding claims 16, the word "authorised" should be spelled as "authorized'. 
Appropriate correction is required. 

Claim Rejections - 35 USC §112 
The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter, which the applicant regards as his invention. 

Claim 20 and 21 are rejected under 35 U.S.C. 112, second paragraph, as being 

indefinite for failing to particularly point out and distinctly claim the subject matter which 

applicant regards as the invention. 

Regarding claim 20, this claim recites that "interface means is resident ... within 

said monitoring component", but the Fig. 1 of the application depicts that the card 

reader 12 is a separate component of the system 10 that also includes the monitoring 

component 24. Appropriate correction is required. 

Regarding claim 21, this claim recites that "interface means comprises said 
computer platform" which is incorrect, because the interface means (i.e., the card 
reader 12 in Fig. 1 of the application) does not comprise the computer platform as 
depicted in Figs. 1 and 2. Appropriate correction is required. 

Claim 27 recites the limitation "said certified reference data" in lines 1-2. There is 
insufficient antecedent basis for this limitation in the claim. 
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Claim 35 recites the limitation "said integrity response" in line 2. There is 
insufficient antecedent basis for this limitation In the claim. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1. Claims 1, 2, 10-32, 38 and 41-61 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Lee (5,923,759) in view of Sprunk (5,822,431). 

Claims 1 and 48 

Lee discloses: 

A system of computing apparatus comprising (Fig. 1): 

a computing platform having a first data processor and a first data storage means 
(col. 5, lines 55-67); 

a monitoring component having a second data processor and a second data 
storage means (col. 3, lines 43-67, where security module corresponds to the recited 
monitoring component); and 

a token device being physically distinct and separable from said computing 
platform and said monitoring component (col. 6, lines 15-25), 
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wherein in one mode of operation, said token device operates to make an 
integrity cliallenge to said monitoring component and said token device will not 
undertake specific actions of which it is capable unless it receives a satisfactory 
response to said integrity challenge (col. 6, lines 52-67). 

However, Lee does not expressly disclose that said monitoring component is 
configured to perform a plurality of data checks on said computing platform. 

Sprunk teaches a mechanism that by which the integrity of a computing 
component is checked (corresponding to the recited a plurality of data checks) by 
another computing component (corresponding to the recited monitoring component) in 
order to find out the status of the first computing component (col. 1 , lines 58-62; col. 3, 
lines 20-25; col. 5, lines 13-20; col. 6, lines 13-22; col. 13, lines 11-19). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee by the teaching of Sprunk, 
because it ensures that the network meets a minimum reliability standard (col. 8, lines 
33-47). 

Claims 2 and 49 

Lee discloses: 

token device receives a detailed response to said integrity challenge, and 
processes said integrity response to interpret said integrity response (col. 7, lines 17- 
34). 
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Claims 10 and 50 

Lee discloses: 

token device is requested to take an action (col. 6, lines 37-52). 

Claims 11 and 51 

Lee discloses: 

token device requests to take an action (col. 6, lines 53-267). 

Claim 12 

Lee discloses: 

The system as claimed in claim 1 in which said token device sends image data to 
said computer platform if a said satisfactory response to said integrity challenge is 
received, and said computer platform displays said image data (col. 7, lines 52-61, 
where prompting corresponds to displaying and entering PIN by the user corresponds to 
sending image). 

Claims 13 and 52 
Lee discloses: 

The monitoring component is capable of establishing an identity of itself (col. 7, 
lines 17-25, where MAC corresponds to the recited identity). 
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Claims 14. 53 and 58 
Lee discloses: 

The system as claimed in claim 1, further comprising an interface means for 
interfacing between said monitoring component and said token device (col. 2, lines 59- 
65; col. 3. lines 3-41, col. 4, lines 53-64; col. 6, lines 15-25). 
Claim 15 and 54 

Lee in view of Sprunk discloses: 

The system as claimed in claim 1, wherein said system of computing apparatus 
is configured such that said monitoring component reports said data checks to said 
token device as stated above for the like elements of claims 1 and 2, said data checks 
containing data describing a status of said computer platform (Sprunk, col. 3, lines 20- 
25; col. 6, lines 13-22). 

Claim 16 

Lee discloses: 

The system as claimed in claim 1, wherein a said specific action comprises 
authorizing said computing platform to undertake a transaction on behalf of a user of 
said system (col. 1 , lines 35-52; col. 8, lines 35-48). 

Claim 17 

This claim is rejected as applied to the like elements of claim 1 as stated above 
and further the following: 
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Lee discloses: 

token device sends an integrity challenge to said monitoring component (col. 6, 
lines 53-65); 

said monitoring component generates a response to said integrity challenge (col. 
6, lines 53-65); 

if said token device receives a satisfactory response to said integrity challenge, 
then said token device sends verification data to said computer platform, said 
verification data verifying correct operation of said computer platform (col. 6, lines 53- 
65; col. 7, lines 17-34); and 

said computer platform displays said verification data on a visual display screen 
(col. 7, lines 52-61). 

Claim 18 

This claim is rejected as applied to the like elements of claims 1, 13, 14 and 15 
as stated above. 
Claim 19 

This claim is rejected as applied to the like elements of claims 1,14 and 15 as 
stated above. 
Claim 20 

Lee discloses: 

The computing entity as claimed in claim 18, wherein said interface means is 
resident substantially wholly within said monitoring component (see Figs. 1 and 4). Fig. 
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1 of the application shows that the card reader 12 is not included in the monitoring 
component of 24. 

Claim 21 

Lee discloses: 

The computing entity as claimed in claim 18, wherein said interface means 
comprises said computer platform (see Figs. 1, where system 100 comprises host 
processor and the). Examiner assumed that the interface means in this claim is the 
system motherboard (see page 14 of the application's specification). 

Claim 22 

Lee discloses: 

The computing entity as claimed in claim 18, wherein said interface means 
comprises a PCSC stack in accordance with PCSC Workgroup PC/SC 
Specification 1 .0 (col. 8, lines 22-34; col. 9, lines 14-36. where ISO layer corresponds to 
the recited PCSC stack. The PC/SC Specification 1 .0 is a part of ISO specifications). 

Claim 23 

Lee in view of Sprunk discloses: 

The computing entity as claimed in claim 18, wherein said monitoring component 
comprises a verification means configured to obtain a certification data independently 
certifying said status data, and to provide said certification data to said interface means 
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(Lee, col. 7, line 62-col. 8, line 6; col. 9, lines 14-20, where the block of data 
corresponds to the recited status data that is the integrity information received from the 
computing platform as stated above in the case of claims 1 and 18). 

Claim 24 
Lee discloses: 

The computing entity as claimed in claim 18, wherein said interface means is 
configured to send and receive data according to a pro-active protocol (col. 9, lines 14- 
32). 

Claim 25 

Lee discloses: 

A method of obtaining verification of a state of a computer entity (col. 6, lines 53- 
60), said computer entity comprising a computer platform comprising a first data 
processor and a first memory means (col. 5, lines 55-67), and a monitoring component 
comprising a second data processor and a second memory means (col. 3, lines 43-67, 
where security module corresponds to the recited monitoring component), said method 
comprising the steps of: 

receiving an interrogation request signal via an interface of said computing entity 
(col. 6, lines 53-67); and 

said monitoring component reporting a result message to said interface (col. 6, 
lines 53-67). 
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Lee, however, does not expressly disclose that said monitoring component 
performing a monitoring operation of said computer platform in response to a said 
received interrogation request signal and said result message describing a result of said 
monitoring operation. 

Sprunk teaches a mechanism that by which the integrity of a computing 
component is checked (corresponding to the recited a monitoring operation) by another 
computing component (corresponding to the recited monitoring component) in order to 
find out or describe the status of the first computing component (col. 1 , lines 58-62; col. 
3, lines 20-25; col. 5, lines 13-20; col. 6, lines 13-22; col. 13, lines 11-19). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee by the teaching of Sprunk, 
because it ensures that the network meets a minimum reliability standard (col. 8, lines 
33-47). 

Claim 26 

Lee discloses: 

A method as claimed in claim 25, in which said monitoring operation comprises 
the steps of: 

said monitoring component being able to report a set of certified reference data 
(Lee, col. 7, line 62-col. 8, line 6; col. 9, lines 14-20, where the block of data 
corresponds to the recited certified reference data); and 
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Lee, however, does not expressly disclose that said monitoring component 
carrying out one or a plurality of data checks on components of said computing platform 
and report the result of the data check. 

Sprunk teaches a technique that by which the integrity of a computing 
component is checked (corresponding to the recited one or a plurality of data checks) 
by another computing component (corresponding to the recited monitoring component) 
in order to find out the status of the first computing component (col. 1 , lines 58-62; col. 
3, lines 20-25; col. 5, lines 13-20; col. 6, lines 13-22; col. 13, lines 11-19). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee by the teaching of Sprunk, 
because it ensures that the network meets a minimum reliability standard (col. 8, lines 
33-47). 

Claim 27 

Sprunk discloses: 

The method as claimed in claim 25, wherein said certified reference data 
includes a set of metrics to be expected when measuring particular components of said 
computing platform, and includes digital signature data identifying an entity that certifies 
said reference data (col. 8, lines 33-47 and col. 10, lines 36-44). 
Claim 28 

This claim is rejected as applied to the like elements of claim 15 as stated above. 
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Claim 29 

Lee discloses: 

The method as claimed in claim 25, wherein said result message is transmitted 
by said interface to a token device external of said computing entity (col. 3, lines 32-58; 
col. 6, lines 53-67). 

Claim 30 

Sprunk discloses: 

The method as claimed in claim 25, comprising the step of reporting a result of 
said monitoring operation by generating a visual display of confirmation data (col. 7, 
lines 27-37 and col. 8, lines 33-47). 

Claim 31 

Lee discloses: 

The method as claimed in claim 25, further comprising the step of adding a digital 
signature data to said result message, said digital signature data identifying said 
monitoring component; and transmitting said result message and said digital signature 
data from said interface (col. 7, line 62-col. 8, line 6). 
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Claim 32 

Lee discloses: 

A method of obtaining verification of a state of a computer entity, said computer 
entity comprising a computer platform and a monitoring component (col. 6, lines 53-60), 
said method comprising the steps of: 

an application requesting access to a functionality from a token device (col. 2, 
lines 27-39); 

in response to said request for access to functionality said token device 
generating a request signal requesting a verification data from said monitoring 
component (col. 7, lines 17-34); 

in response to said request for verification, said monitoring component reporting 
a result message to said token device (col. 7, lines 17-34). 

by receipt of a satisfactory said result message, said token device offers said 
functionality to said application (col. 8, lines 49-57). 

Lee, however, does not expressly disclose that said result message describing a 
result of a monitoring operation. 

Sprunk teaches a technique that by which the integrity of a computing 
component is checked (corresponding to the recited monitoring operation) by another 
computing component (corresponding to the recited monitoring component) in order to 
find out or describe the status of the first computing component (col. 1 , lines 58-62; col. 
3, lines 20-25; col. 5, lines 13-20; col. 6, lines 13-22; col. 13, lines 11-19). 
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Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee by the teaching of Sprunk, 
because it ensures that the network meets a minimum reliability standard (col. 8, lines 
33-47). 

Claim 38 

Lee discloses: 

A method of checking an integrity of operation of a computing entity, said 
computing entity comprising a computer platform having a first processor means and 
first data storage means (col. 5, lines 55-67), and a monitoring component comprising a 
second processor and second memory means (col. 3, lines 43-67, where security 
module corresponds to the recited monitoring component), by means of a token device, 
said token device comprising a third data processor and a third memory means (col. 1, 
lines 8-14), said method comprising the steps of: 

programming said token device to respond to a received poll signal from an 
application program, said poll signal received from said computer platform (col. 6, lines 
37-52); 

said token device receiving a poll signal from said computer platform (col. 6, lines 
37-52); 

in response to said received poll signal, said token device generating a signal for 
requesting a verification operation by said monitoring component (col. 7, lines 17-34); 
and 
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Lee, however, does not expressly disclose that said monitoring component 
performing a verification operation of said computer platform in response to said 
received signal from said token device. 

Sprunk teaches a technique that by which the integrity of a computing 
component is checked (corresponding to the recited verification operation) by another 
computing component (corresponding to the recited monitoring component) in order to 
find out the status of the first computing component (col. 1 , lines 58-62; col. 3, lines 20- 
25; col. 5, lines 13-20; col. 6, lines 13-22; col. 13, lines 11-19). 

Therefore, It would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee by the teaching of Sprunk, 
because it ensures that the network meets a minimum reliability standard (col. 8, lines 
33-47). 

Claim 42 

Lee discloses: 

A method of verifying a status of a computing entity, by means of a token device 
provided external of said computing entity (col. 1, lines 8-14), said method comprising 
the steps of: 

said token device receiving a poll signal (col. 6, lines 37-52); 
said token device responding to said poll signal by providing a request for 
obtaining verification of a state of said computer entity (col. 7, lines 17-34); and 
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said token device receiving a result message, said result message describing the 
result of said verification (col. 7, lines 17-34). 

Claim 43 

Lee discloses: 

A method by which a token device can obtain verification of a state of a 
computing platform (coL 6, lines 53-67), 

a monitoring component being capable establishing an identity of itself (col. 7, 
lines 17-25, where MAC corresponds to the recited identity); and 

wherein said token device has data processing capability and behaves in an 
expected manner (col. 1, lines 8-14; col. 6, lines 53-67; col. 7, lines 17-34); 

said token device being physically separable from said computing platform and 
said monitoring component (Figs. 2 and 4), said token device having cryptographic data 
processing capability (col. 6, lines 53-67) 

wherein, said monitoring component proves its identity to said token device (col. 
7, lines 17-34) 

Lee, however, does not expressly disclose that said monitoring component being 
capable of performing at least one data check on said computer platform and 
establishing a report of said at least one data check performed on said computing 
platform. 

Sprunk teaches a technique that by which the integrity of a computing 
component is checked (corresponding to the recited performing at least one data check) 
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by another computing component (corresponding to the recited monitoring component) 
in order to find out or describe the status (corresponding to the recited establishing a 
report) of the first computing component (col. 1, lines 58-62; col. 3, lines 20-25; col. 5, 
lines 13-20; col. 6, lines 13-22; col. 13, lines 11-19). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee by the teaching of Sprunk, 
because it ensures that the network meets a minimum reliability standard (col. 8, lines 
33-47). 

Claim 44 

Lee discloses: 

A token device comprising a data processor and a memory device (col. 1 , lines 
8-14), said token device configured to perform at least one data processing or signaling 
function (col. 1, lines 8-14; col. 6, lines 53-67; col. 7, lines 17-34): 

wherein said token device operates to: 

receive an integrity check data from an external source (col. 7, lines 17-34); 

if said integrity check data supplied to said token device is satisfactory, then said 
token device allows a said function (col. 7, lines 17-34; col. 8, lines 49-57 ); and 

if said integrity check data received by said token device is unsatisfactory, then 
said token device denies said function (col. 7, lines 17-34; col. 8, lines 49-57 ). 
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Claim 41 

This claim is rejected as applied to the like elements of claims 22, 24 and 32 as 
stated above. 

Claims 45-47 and 57 
Lee discloses: 

A system as claimed in claims 1, 18 and 44, wherein said token device is a smart 
card (col. 1, lines 15-25). 

Claim 55 

Lee discloses: 

The system as claimed in claim 48, wherein the monitoring component is 
mounted on a common assembly with the first processor (see Fig. 1 and col. 5, lines 5- 
12). 

Claim 56 

Lee in view of Sprunk discloses: 

The system as claimed in claim 48, wherein one or more of said data checks 
comprise a check of the integrity of the basic input/output software for one or more 
components of the computing apparatus (Lee, col. 5, lines 50-54). 
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Claim 58 

Lee discloses: 

The system as claimed in claim 53, wherein the portable user token is a smart 
card, and the token interface comprises a smart card reader (col. 1, lines 15-25; Fig. 1). 

Claim 59 

Lee discloses: 

A computing entity comprising: 

computing platform having a first data processor and a first memory (col. 5, lines 
55-67); 

a monitoring component having a second data processor and a second memory 
(col. 3, lines 43-67, where security module corresponds to the recited monitoring 
component), 

a communications interface for communicating with a portable user token (see 
Fig. 1, 132-136), said communications interface having a communication path to the 
monitoring component (see Fig. 1), 

wherein said computing entity is configured such that said monitoring component 
is adapted to report said data checks to a portable user token connected to the 
communications interface, 

Lee, however does not disclose that said monitoring component is configured to 
perform a plurality of data checks on said computing platform, said data checks 
containing data describing a status of said computing platform. 
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Sprunk teaches a mechanism that by which the integrity of a computing 
component is checked (corresponding to the recited a plurality of data checks) by 
another computing component (corresponding to the recited monitoring component) in 
order to find out the status of the first computing component (col. 1, lines 58-62; col. 3, 
lines 20-25; col. 5, lines 13-20; col. 6, lines 13-22; col. 13, lines 11-19). Sprunk further 
teaches that the verifying component describes the status of the component being 
verified by determining the trustworthiness of that computing component (col. 3, lines 
20-25; col. 6, lines 13-22). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee by the teaching of Sprunk, 
because it ensures that the network meets a minimum reliability standard (col. 8, lines 
33-47). 

Claim 60 

This claim is rejected as applied to the like elements of claim 19 as stated above. 

Claim 61 

Lee discloses: 

A system as claimed in claims 1, 18 and 44, wherein said token device is a smart 
card (col. 1, lines 15-25). 
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2. Claims 3-5, 9, 33, 34, 36, 37 and are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Lee (5,923,759) in view of Sprunk (5,822,431) as applied 
to claims 1 and 2 above, and further in view of Perlman et al (6,230,266 B1, 
hereinafter Perlman). 

Claims 3-5. 9, 33 and 34 

Lee in view of Sprunk does not expressly disclose that the systenn as claimed in 
claim 1, further comprising a third party server, wherein a response to said integrity 
challenge is sent to said third party server. 

Perlman teaches a system having a server that receives information from a 
verifying principal (corresponding to the recited token device or monitoring component) 
to verify the status of a certificate (col., line 56-col. 6, line 1-15). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee in view of Sprunk by the 
teaching of Sprunk, because it would provide a technique to ascertain if a computing 
element has been compromised (col. 4, lines 22-28). 
Claim 36 

Lee discloses: 

a server sends a simplified integrity response to said token device col. 7, lines 
17-34). 

Lee in view of Sprunk does not expressly disclose that the system as claimed in 
claim 32, comprises a third party server. 
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Perlman teaches a system having a server that receives information from a 
verifying principal (corresponding to the recited token device or monitoring component) 
to verify the status of a certificate (col., line 56-col. 6, line 1-15). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Lee in view of Sprunk by the 
teaching of Sprunk, because it would provide a technique to ascertain if a computing 
element has been compromised (col. 4, lines 22-28). 

Claim 37 

Lee in view of Sprunk discloses: 

The method as claimed in claim 32, further comprising the steps of: 
adding a digital signature data to a simplified integrity response, said digital 

signature data authenticating a server to said token device (Lee, col. 7, line 62-col. 8, 

line 6). 

Lee in view of Sprunk does not expressly disclose that the system as claimed in 
claim 32, comprises a third party server. 

Perlman teaches a system having a server that receives information from a 
verifying principal (corresponding to the recited token device or monitoring component) 
to verify the status of a certificate (col., line 56-col. 6, line 1-15). 
Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Lee in view of Sprunk by the teaching of 



Application/Control Number: 09/936,131 
Art Unit: 2132 



Page 23 



Sprunk, because it would provide a technique to ascertain if a computing element has 
been compromised (col. 4, lines 22-28). 

Allowable Subject Matter 

Claims 6-8 and 35 are objected to as being dependent upon a rejected base 
claim, but would be allowable if rewritten in independent form including all of the 
limitations of the base claim and any intervening claims. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

US Patent No. 5,778,072 to Samar. 
US Patent No. 5,761,309 to Ohashi et al. 
US Patent No. 5,544,246 to Mandelbaum et al. 
US Patent No. 5,666,412 to Handelman et al. 
US Patent No. 6,212,635 to Reardon. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Abdulhakim Nobahar whose telephone number is 571- 
272-3808. The examiner can normally be reached on M-T 8-6. 



Application/Control Number: 09/936,131 



Page 24 



Art Unit: 2132 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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Examiner 
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